Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e5424dc-f0e6-3773-8cb3-e3042acfbf2b.roa
File: 8e5424dc-f0e6-3773-8cb3-e3042acfbf2b.roa (raw, json)
Hash identifier: TTEGTNZDGU1wwlsfCPf+j6t5+NAd6gG7n4ZSh27dbfY=
Subject key identifier: CA:14:A3:7D:69:90:B2:54:5D:59:FA:54:47:41:F3:EA:20:91:C4:69
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C9CFC0058D58486A2DF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e5424dc-f0e6-3773-8cb3-e3042acfbf2b.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33491
IP address blocks: 96.97.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:9c:fc:00:58:d5:84:86:a2:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=1e0b84c1-6d7c-4b31-9fe3-73a9fe875234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fb:a7:66:f9:f0:73:06:35:96:a9:cb:10:4b:
1c:33:65:65:69:a4:4e:24:35:96:21:d4:e5:fd:2a:
95:9e:20:8b:2d:c9:14:59:51:24:63:7c:1e:0a:9b:
5c:23:bd:37:cc:24:fc:61:a3:99:4b:c8:34:4e:65:
01:8c:9a:71:9c:fa:f3:a4:32:d9:88:75:64:fb:12:
13:c4:85:93:50:e0:d0:90:ae:55:82:99:c2:f5:1a:
2d:58:e1:57:95:b7:26:25:b0:2a:83:8c:73:17:b5:
d2:f3:a8:be:85:48:35:16:32:93:7b:2a:13:ce:56:
89:04:9a:21:f0:b8:fd:a7:36:b2:b6:e0:7d:68:a5:
30:32:e9:3a:3f:d2:12:46:d7:de:4f:48:dc:1d:43:
68:97:4d:18:8e:71:72:39:d8:95:30:a1:71:1f:0e:
73:b0:02:23:19:fb:db:2c:b8:fd:77:65:7f:6d:34:
2c:e6:be:e2:c5:b8:6e:a4:ab:57:94:82:d2:92:a8:
6f:59:bd:26:b0:a2:ad:10:82:dc:e5:68:8e:bf:c4:
d5:8e:df:f2:10:07:6e:87:ae:dc:a7:6d:ef:16:bb:
9f:f5:6e:fb:9d:b8:9e:5c:e8:c0:a4:1a:f6:00:e0:
48:73:f8:c6:42:60:7e:df:80:ef:f9:6b:ab:dc:e5:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:14:A3:7D:69:90:B2:54:5D:59:FA:54:47:41:F3:EA:20:91:C4:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e5424dc-f0e6-3773-8cb3-e3042acfbf2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.97.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:65:35:24:b4:ce:80:9e:39:2d:c7:01:2f:2a:c1:cb:2a:a3:
49:ea:67:47:ca:d6:4c:6b:4d:93:87:c9:7c:7a:25:0d:55:7b:
51:08:92:c8:82:fa:17:47:2a:09:5d:d5:01:15:dd:a7:24:8a:
e0:6b:0f:18:c3:ce:e7:ed:2d:cf:25:fd:2e:c1:58:d5:ed:aa:
fd:94:bb:5d:ed:32:2b:61:ff:33:18:77:17:a7:5f:88:1c:ae:
d1:b5:32:55:16:d1:b2:72:03:c8:63:f4:14:0c:31:31:ad:25:
7d:da:64:5a:89:e3:48:ae:16:b5:9f:01:21:db:d6:56:3e:c7:
7b:6a:08:ef:3f:cb:f3:f2:ad:ef:63:cb:ef:bd:e2:0c:5f:7b:
4c:87:eb:25:f3:19:ee:fc:7b:ac:2e:42:27:df:6e:b3:07:73:
5d:d9:36:aa:2c:dd:1e:e7:8e:03:ff:a3:46:39:85:34:a3:b4:
77:2d:9b:56:88:b8:57:ce:05:bb:d4:4b:f6:b5:82:1b:3e:f1:
43:8a:04:b4:6c:b9:3d:61:d4:5a:d5:61:0c:dd:f7:2a:96:82:
f7:e6:6b:a1:75:83:36:73:64:c0:ac:00:9b:fa:47:d5:9a:15:
0d:16:aa:2a:2a:3d:4a:cb:1c:09:c5:15:1e:15:d6:bf:e0:c2:
ea:95:b9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:31:57 2025 by rpki-client